Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CB12D70C54E11EF86771DBD762E951A.roa
File: 4CB12D70C54E11EF86771DBD762E951A.roa (raw, json)
Hash identifier: dWzP75fTMC+QQ+sIaG2x8Q1BLx+ieXPBaAbncRGRfC8=
Subject key identifier: 91:C6:53:49:F5:8D:31:AB:DF:F4:B7:B8:E1:B7:2D:A1:1A:02:28:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CB12D70C54E11EF86771DBD762E951A.roa
Signing time: Sat 28 Dec 2024 19:02:36 +0000
ROA not before: Sat 28 Dec 2024 19:02:32 +0000
ROA not after: Fri 12 Dec 2025 19:02:32 +0000
asID: 984
IP address blocks: 154.210.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77047 (0x12cf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 19:02:32 2024 GMT
Not After : Dec 12 19:02:32 2025 GMT
Subject: CN=67704b4c-ce65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:de:de:5d:69:65:cc:78:59:61:ca:f9:31:
b3:78:27:31:11:0b:f1:4b:39:b5:79:03:37:eb:6e:
2a:0d:c3:3f:53:32:a2:aa:5b:f9:c7:20:32:20:82:
a2:e2:ee:06:0f:9a:b8:70:09:c1:25:fe:55:7e:f8:
40:80:94:8a:6a:8c:da:d3:b6:23:c2:71:4a:62:c7:
51:f7:5d:68:0d:71:d2:04:70:1e:fa:2a:19:31:a9:
ba:7a:4e:bb:8a:25:15:96:73:55:65:70:53:94:07:
d6:d8:37:23:94:28:fe:69:46:b8:e4:7f:88:b5:d4:
15:a2:18:47:78:c6:e3:a5:da:91:df:97:bf:ad:ca:
1a:4e:05:80:57:82:4e:c1:37:e4:d0:eb:ba:95:2d:
44:91:13:c5:f2:3e:34:53:82:3c:41:58:ce:c4:90:
b6:bf:56:a4:ad:52:e6:51:26:5b:5f:12:48:af:4a:
50:b6:b0:81:2b:a4:d7:72:d1:57:dc:bd:f0:f3:b6:
5b:c0:47:32:ec:93:84:e0:13:64:f4:5d:cf:ea:46:
a8:25:cd:88:61:f8:89:61:ae:d9:0c:a4:db:ce:d7:
cb:b2:ae:a0:1d:ea:2e:8f:aa:42:17:9a:2e:a2:a6:
92:84:1e:7e:c7:73:ed:a5:2c:d5:1e:1c:17:90:ed:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C6:53:49:F5:8D:31:AB:DF:F4:B7:B8:E1:B7:2D:A1:1A:02:28:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CB12D70C54E11EF86771DBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.5.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2b:18:bf:05:88:8e:e6:f3:70:ed:ec:ec:17:88:cc:cc:98:
c7:13:91:04:82:de:69:00:6a:7d:05:95:4d:3a:29:f4:65:9a:
ab:67:42:a0:26:f0:bb:30:b1:9b:3f:8a:db:5b:87:da:1c:0b:
7c:05:c5:3a:a2:34:48:25:4e:27:7d:78:3b:8b:18:75:97:26:
07:c1:2e:23:06:fb:f3:65:9e:83:0d:2c:20:48:db:a9:cf:c1:
1c:9d:39:c9:ae:0e:31:d6:d9:5b:bc:51:51:dc:e4:1b:91:e3:
35:49:f3:49:1d:c3:bb:c4:a6:d7:96:70:cc:39:de:e6:28:de:
c9:85:93:06:eb:bd:ac:7c:3c:a7:85:72:0e:82:5c:9c:e7:f0:
7a:fd:97:dd:ed:d3:35:74:af:30:8f:6c:31:38:d0:17:42:40:
72:be:e5:5b:ee:c0:42:84:6d:2f:6f:e8:c1:c7:05:36:c9:4e:
2f:3a:5a:6f:a5:9c:43:23:7f:57:85:5f:3f:a6:4e:35:e2:f4:
55:ed:88:87:03:5f:93:42:b6:6f:bd:2c:51:e8:1d:a4:83:22:
84:b2:bb:57:f3:3d:ce:7d:bd:36:8a:0f:50:3a:7e:28:a3:b1:
79:1d:98:92:15:d6:db:b4:49:fe:c8:2c:dc:3c:b0:21:88:3c:
3f:8f:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:48 2025 by rpki-client